(1) Purposes Involving the Supervision and Examination of Financial Institutions
The BOT performs official duties in connection with the supervision and examination of various types of business operators such as financial institutions and specialised financial institutions under the Financial Institutions Business Act, B.E. 2551 (2008) (as amended), asset management companies under the Emergency Decree on Asset Management Companies, B.E. 2541 (1998) (as amended), operators of businesses relating to foreign payment elements under the Exchange Control Act, B.E. 2485 (1942) (as amended) and business operators under the Payment Systems Act, B.E. 2560 (2017). Apparent need is, therefore, established for the BOT to conduct the processing of data including personal data of persons concerned as received from such business operators, for the purpose of performing its regulatory and inspecting roles over those operators in an endeavour to ensure security and prudence in their business operation; hence the BOT’s discharge of duties in maintaining stability of monetary economy. In addition, the processing is for the purpose of facilitating the performance of BOT’s duties in relation to the protection of users of financial services. In this connection, general members of the public may seek advice on, or address complaints concerning, financial services via the BOT’s Financial Consumer Protection Center (FCC). This being so, the processing of users’ personal data by the BOT is essential for its co-ordination with financial institutions and for its proceeding in relation to the provision of advice or the pursuit of activities concerned.
(2) Purposes Involving the Determination and Implementation of Monetary Policies and Monetary Economy Measures of Significant Importance
The BOT’s discharge of its duties as regards the determination and implementation of monetary policies necessitates its processing of data, including personal data, for conducting assessment and forecasts of economic trends and directions in order to expedite its achievement of the purposes of maintaining monetary stability.
In addition, the collection by the BOT of such personal data as information on financial affairs, incomes, liabilities or business operation is carried out for making analyses and conducting studies and research, for determining policies or measures concerned in the resolution of economic problems affecting the public at large and business operators and also for setting approaches to the promotion of economic development.
(3) Purposes Involving the Supervision and Development of Payment Systems
Compelling need also exists for the BOT’s processing of personal data in the course of its performing duties in relation to the supervision and development of payment systems to ensure their security and efficiency as required by the Payment Systems Act, B.E. 2560 (2017) and also in the course of the BOT serving as a provider of crucial payment systems, for example, the Bank of Thailand Automated High-Value Transfer Network (BAHTNET) system.
(4) Purposes Involving the Issuance and Management of Government Banknotes
Statutory responsibilities assumed by the BOT in issuing Government banknotes as provided by the Bank of Thailand Act, B.E. 2485 (1942) (as amended) entails its processing of personal data, in particular, data relating to criminal records for the purposes of allowing access to restricted areas and conducting authentication in transactions involving banknote management, such as the deposit, withdrawal and carriage of banknotes.
(5) Purposes Involving the Conduct of Activities for Lawful Public Interests
The BOT has established its Learning Center and has, through various projects, striven to create and strengthen financial literacy as well as knowledge in the interest of general members of the public, pupils and students. Such activities engender compelling need for the processing of personal data by the BOT in order to attain the purposes of the delivery of such services and the pursuit of such projects.
(6) Purposes Involving the Maintenance of Safety of the BOT’s Personnel, Premises and Property
As an essential part of safety operations for the benefit of its personnel, premises and property, the BOT needs to acquire from persons gaining access to its areas personal data including their names, surnames, agencies of affiliation and photographs. In effect, their photographs are also taken via closed-circuit television cameras (CCTV cameras) as well.